RHSA-2026:34160
Vulnerability from csaf_redhat - Published: 2026-07-01 11:09 - Updated: 2026-07-02 14:12A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
A flaw was found in dynaconf, a Python configuration management tool. This Server-Side Template Injection (SSTI) vulnerability occurs due to unsafe template evaluation in the @Jinja resolver when the jinja2 package is installed. A remote attacker could exploit this by embedding malicious template expressions in configuration values, which are then processed without a sandboxed environment. This could lead to arbitrary code execution on the affected system.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
A flaw was found in DOMPurify, a DOM-only cross-site scripting sanitizer. A remote attacker could exploit an inconsistency in how forbidden tags and attributes are handled when function-based tag additions are used. This allows malicious HTML, MathML, or SVG elements to bypass sanitization and execute arbitrary code in the user's browser, leading to Cross-Site Scripting (XSS).
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application's core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
A flaw was found in protobufjs, a library used to compile protobuf definitions into JavaScript functions. A remote attacker could exploit this vulnerability by providing a crafted descriptor that includes a non-string default value for a bytes field. This could lead to the generation of an unsafe expression within the toObject conversion function, ultimately allowing the attacker to execute arbitrary code.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via `ProxyManager.connection_from_url().urlopen()` with `assert_same_host=False`, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitive information.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat Ansible Automation Platform 2.6\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nSecurity Fix(es):\n\n* automation-platform-ui: Axios: Denial of Service due to unenforced request and response size limits (CVE-2026-44488)\n* automation-platform-ui: Axios: Information disclosure due to prototype pollution vulnerability (CVE-2026-44495)\n* automation-platform-ui: fast-uri: URI authority bypass due to improper delimiter handling (CVE-2026-6322)\n* automation-platform-ui: Axios: Arbitrary HTTP header injection via prototype pollution (CVE-2026-42035)\n* automation-platform-ui: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization (CVE-2026-41240)\n* automation-platform-ui: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors (CVE-2026-44293)\n* python3.12-pyjwt: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526)\n* automation-controller: Dynaconf: Arbitrary code execution via Server-Side Template Injection (CVE-2026-33154)\n* python3.12-urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431)\n* python3.12-urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:34160",
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/whats_new-async_updates",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/whats_new-async_updates"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade"
},
{
"category": "external",
"summary": "2449774",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449774"
},
{
"category": "external",
"summary": "2461147",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461147"
},
{
"category": "external",
"summary": "2461606",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461606"
},
{
"category": "external",
"summary": "2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "2477104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477104"
},
{
"category": "external",
"summary": "2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "2477167",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477167"
},
{
"category": "external",
"summary": "2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34160.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update",
"tracking": {
"current_release_date": "2026-07-02T14:12:45+00:00",
"generator": {
"date": "2026-07-02T14:12:45+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:34160",
"initial_release_date": "2026-07-01T11:09:18+00:00",
"revision_history": [
{
"date": "2026-07-01T11:09:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-01T11:09:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-02T14:12:45+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Ansible Automation Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "automation-gateway-0:2.6.20260701-1.el9ap.src",
"product": {
"name": "automation-gateway-0:2.6.20260701-1.el9ap.src",
"product_id": "automation-gateway-0:2.6.20260701-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.6.20260701-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.11.10-1.el9ap.src",
"product": {
"name": "automation-hub-0:4.11.10-1.el9ap.src",
"product_id": "automation-hub-0:4.11.10-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.11.10-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"product": {
"name": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"product_id": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.11.10-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-platform-ui-0:2.6.10-1.el9ap.src",
"product": {
"name": "automation-platform-ui-0:2.6.10-1.el9ap.src",
"product_id": "automation-platform-ui-0:2.6.10-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-platform-ui@2.6.10-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"product": {
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"product_id": "python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.12-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"product": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"product_id": "python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"product": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"product_id": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-urllib3@2.7.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.2.9-3.el9ap.src",
"product": {
"name": "automation-eda-controller-0:1.2.9-3.el9ap.src",
"product_id": "automation-eda-controller-0:1.2.9-3.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.2.9-3.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"product": {
"name": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"product_id": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base@2.6.20260701-2.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.7.13-2.el9ap.src",
"product": {
"name": "automation-controller-0:4.7.13-2.el9ap.src",
"product_id": "automation-controller-0:4.7.13-2.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.7.13-2.el9ap?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"product": {
"name": "automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"product_id": "automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.6.20260701-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"product": {
"name": "automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"product_id": "automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-config@2.6.20260701-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"product": {
"name": "automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"product_id": "automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-server@2.6.20260701-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.11.10-1.el9ap.noarch",
"product": {
"name": "automation-hub-0:4.11.10-1.el9ap.noarch",
"product_id": "automation-hub-0:4.11.10-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.11.10-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"product": {
"name": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"product_id": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.11.10-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"product": {
"name": "automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"product_id": "automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-platform-ui@2.6.10-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"product": {
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"product_id": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.12-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"product": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"product_id": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt%2Bcrypto@2.13.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"product": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"product_id": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"product": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"product_id": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-urllib3@2.7.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"product": {
"name": "automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"product_id": "automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.2.9-3.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"product": {
"name": "automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"product_id": "automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base@1.2.9-3.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"product": {
"name": "automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"product_id": "automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.2.9-3.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"product": {
"name": "automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"product_id": "automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.2.9-3.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"product": {
"name": "automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"product_id": "automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.2.9-3.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bactivitystream@2.6.20260701-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bapi_documentation@2.6.20260701-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bauthentication@2.6.20260701-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bchannel_auth@2.6.20260701-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bfeature_flags@2.6.20260701-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bjwt_consumer@2.6.20260701-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Boauth2_provider@2.6.20260701-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Brbac@2.6.20260701-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bredis_client@2.6.20260701-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bresource_registry@2.6.20260701-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Brest_filters@2.6.20260701-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"product": {
"name": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"product_id": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base@2.6.20260701-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"product": {
"name": "automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"product_id": "automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.7.13-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-server-0:4.7.13-2.el9ap.noarch",
"product": {
"name": "automation-controller-server-0:4.7.13-2.el9ap.noarch",
"product_id": "automation-controller-server-0:4.7.13-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-server@4.7.13-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"product": {
"name": "automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"product_id": "automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-ui@4.7.13-2.el9ap?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.7.13-2.el9ap.x86_64",
"product": {
"name": "automation-controller-0:4.7.13-2.el9ap.x86_64",
"product_id": "automation-controller-0:4.7.13-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.7.13-2.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"product": {
"name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"product_id": "automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.13-2.el9ap?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.7.13-2.el9ap.ppc64le",
"product": {
"name": "automation-controller-0:4.7.13-2.el9ap.ppc64le",
"product_id": "automation-controller-0:4.7.13-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.7.13-2.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"product": {
"name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"product_id": "automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.13-2.el9ap?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.7.13-2.el9ap.s390x",
"product": {
"name": "automation-controller-0:4.7.13-2.el9ap.s390x",
"product_id": "automation-controller-0:4.7.13-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.7.13-2.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"product": {
"name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"product_id": "automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.13-2.el9ap?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.7.13-2.el9ap.aarch64",
"product": {
"name": "automation-controller-0:4.7.13-2.el9ap.aarch64",
"product_id": "automation-controller-0:4.7.13-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.7.13-2.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"product": {
"name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"product_id": "automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.13-2.el9ap?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.7.13-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src"
},
"product_reference": "automation-controller-0:4.7.13-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.7.13-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.7.13-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64"
},
"product_reference": "automation-controller-0:4.7.13-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.7.13-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le"
},
"product_reference": "automation-controller-0:4.7.13-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.7.13-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x"
},
"product_reference": "automation-controller-0:4.7.13-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.7.13-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src"
},
"product_reference": "automation-controller-0:4.7.13-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.7.13-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64"
},
"product_reference": "automation-controller-0:4.7.13-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.7.13-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-server-0:4.7.13-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch"
},
"product_reference": "automation-controller-server-0:4.7.13-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-ui-0:4.7.13-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch"
},
"product_reference": "automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64"
},
"product_reference": "automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le"
},
"product_reference": "automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x"
},
"product_reference": "automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64"
},
"product_reference": "automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.2.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch"
},
"product_reference": "automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.2.9-3.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src"
},
"product_reference": "automation-eda-controller-0:1.2.9-3.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-0:1.2.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch"
},
"product_reference": "automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch"
},
"product_reference": "automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch"
},
"product_reference": "automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch"
},
"product_reference": "automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.6.20260701-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch"
},
"product_reference": "automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.6.20260701-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src"
},
"product_reference": "automation-gateway-0:2.6.20260701-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-config-0:2.6.20260701-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch"
},
"product_reference": "automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-server-0:2.6.20260701-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch"
},
"product_reference": "automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.11.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch"
},
"product_reference": "automation-hub-0:4.11.10-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.11.10-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src"
},
"product_reference": "automation-hub-0:4.11.10-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-platform-ui-0:2.6.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch"
},
"product_reference": "automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-platform-ui-0:2.6.10-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
},
"product_reference": "automation-platform-ui-0:2.6.10-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch"
},
"product_reference": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src"
},
"product_reference": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch"
},
"product_reference": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src"
},
"product_reference": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch"
},
"product_reference": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src"
},
"product_reference": "python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch"
},
"product_reference": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
],
"known_not_affected": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:09:18+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-33154",
"cwe": {
"id": "CWE-917",
"name": "Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)"
},
"discovery_date": "2026-03-20T21:01:35.498935+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449774"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in dynaconf, a Python configuration management tool. This Server-Side Template Injection (SSTI) vulnerability occurs due to unsafe template evaluation in the @Jinja resolver when the jinja2 package is installed. A remote attacker could exploit this by embedding malicious template expressions in configuration values, which are then processed without a sandboxed environment. This could lead to arbitrary code execution on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64"
],
"known_not_affected": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33154"
},
{
"category": "external",
"summary": "RHBZ#2449774",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449774"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33154"
},
{
"category": "external",
"summary": "https://github.com/dynaconf/dynaconf/commit/2fbb45ee36b8c0caa5b924fe19f3c1a5e8603fa7",
"url": "https://github.com/dynaconf/dynaconf/commit/2fbb45ee36b8c0caa5b924fe19f3c1a5e8603fa7"
},
{
"category": "external",
"summary": "https://github.com/dynaconf/dynaconf/releases/tag/3.2.13",
"url": "https://github.com/dynaconf/dynaconf/releases/tag/3.2.13"
},
{
"category": "external",
"summary": "https://github.com/dynaconf/dynaconf/security/advisories/GHSA-pxrr-hq57-q35p",
"url": "https://github.com/dynaconf/dynaconf/security/advisories/GHSA-pxrr-hq57-q35p"
}
],
"release_date": "2026-03-20T20:22:59.090000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:09:18+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection"
},
{
"cve": "CVE-2026-41240",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-04-23T16:04:41.751666+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461147"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in DOMPurify, a DOM-only cross-site scripting sanitizer. A remote attacker could exploit an inconsistency in how forbidden tags and attributes are handled when function-based tag additions are used. This allows malicious HTML, MathML, or SVG elements to bypass sanitization and execute arbitrary code in the user\u0027s browser, leading to Cross-Site Scripting (XSS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
],
"known_not_affected": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41240"
},
{
"category": "external",
"summary": "RHBZ#2461147",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461147"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41240",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41240"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41240",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41240"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/commit/c361baa18dbdcb3344a41110f4c48ad85bf48f80",
"url": "https://github.com/cure53/DOMPurify/commit/c361baa18dbdcb3344a41110f4c48ad85bf48f80"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/releases/tag/3.4.0",
"url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.0"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-h7mw-gpvr-xq4m",
"url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-h7mw-gpvr-xq4m"
}
],
"release_date": "2026-04-23T14:54:32.426000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:09:18+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization"
},
{
"cve": "CVE-2026-42035",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T18:01:17.109481+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461606"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application\u0027s core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Arbitrary HTTP header injection via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
],
"known_not_affected": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42035"
},
{
"category": "external",
"summary": "RHBZ#2461606",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461606"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9",
"url": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9"
}
],
"release_date": "2026-04-24T17:38:07.752000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:09:18+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios: Arbitrary HTTP header injection via prototype pollution"
},
{
"cve": "CVE-2026-44293",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-05-13T16:03:50.961609+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477104"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a library used to compile protobuf definitions into JavaScript functions. A remote attacker could exploit this vulnerability by providing a crafted descriptor that includes a non-string default value for a bytes field. This could lead to the generation of an unsafe expression within the toObject conversion function, ultimately allowing the attacker to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw affecting Red Hat products that incorporate the protobufjs library. protobufjs is vulnerable to arbitrary code execution when compiling protobuf definitions into JavaScript. During generation of the toObject conversion function, a schema-controlled default value on a bytes field that is not a string can be emitted as unsafe JavaScript code. An attacker who can supply or influence the protobuf descriptor processed by the application (low privileges required) may achieve code execution in the Node.js process context. Fixed upstream in protobufjs 7.5.6 and 8.0.2. Affects Red Hat offerings that bundle protobufjs and process attacker-influenced protobuf schemas at runtime.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
],
"known_not_affected": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44293"
},
{
"category": "external",
"summary": "RHBZ#2477104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44293"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44293",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44293"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-66ff-xgx4-vchm",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-66ff-xgx4-vchm"
}
],
"release_date": "2026-05-13T14:43:33.342000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:09:18+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H",
"version": "3.1"
},
"products": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors"
},
{
"cve": "CVE-2026-44431",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-05-13T17:01:41.663622+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477167"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via `ProxyManager.connection_from_url().urlopen()` with `assert_same_host=False`, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
],
"known_not_affected": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44431"
},
{
"category": "external",
"summary": "RHBZ#2477167",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477167"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44431",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc"
}
],
"release_date": "2026-05-13T15:20:24.588000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:09:18+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
],
"known_not_affected": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:09:18+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
],
"known_not_affected": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:09:18+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
],
"known_not_affected": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:09:18+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-48526",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-28T16:01:22.805235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src"
],
"known_not_affected": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "RHBZ#2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
}
],
"release_date": "2026-05-28T15:09:09.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:09:18+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.